3 ms·
Some of the privilege "jails" on a unix system are for programs. Android jails each app by assigning it a unique user ID. [1] I actually agree with you - the P
by sounds 15y ago
Some of the privilege "jails" on a unix system are for programs. Android jails each app by assigning it a unique user ID. [1]
I actually agree with you - the Posix privilege model is dated. But it's still working fine, with additions like the MAC (SELinux), xattr's and ACLs, and now capabilities.
[1] http://www.slideshare.net/pragatiogal/understanding-android-security-model http://www.slideshare.net/pragatiogal/understanding-android-... slide 5/30
- vog 15y agoFor a long time, I was using Linux-VServer (that's a "BSD jails" equivalent for Linux). It worked really well. But it allowed only for Linux guest systems, and the virtual networking often had some unexpected holes and flaws (maybe "BSD jails" work better in that regard). However, with the arise of KVM (and other virtualization systems that no longer slow down your guest systems), I'm switching to KVM for those tasks.